From 329417f0942504cd2a61ae47d9acab8eed997a72 Mon Sep 17 00:00:00 2001 From: Peter Evans Date: Tue, 4 Aug 2020 22:02:58 +0900 Subject: [PATCH] Update documentation --- docs/concepts-guidelines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/concepts-guidelines.md b/docs/concepts-guidelines.md index dc12601..52b5066 100644 --- a/docs/concepts-guidelines.md +++ b/docs/concepts-guidelines.md @@ -142,7 +142,7 @@ From a security perspective it's good practice to fork third-party actions, revi By using third-party actions directly the risk exists that it could be modified to do something malicious, such as capturing secrets. Alternatively, use the action directly and reference the commit hash for the version you want to target. -``` +```yml - uses: thirdparty/foo-action@172ec762f2ac8e050062398456fccd30444f8f30 ```